CVE-2020-7249: Smc d3g0804 Firmware

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a successful login to the admin account).

Affected products

• Smc d3g0804 Firmware: version 3.5.2.5-lat_ga only

Published 2020-01-21. Last modified 2026-06-17.